US20070028112A1 - Data transfer device - Google Patents

Data transfer device Download PDF

Info

Publication number
US20070028112A1
US20070028112A1 US11/482,556 US48255606A US2007028112A1 US 20070028112 A1 US20070028112 A1 US 20070028112A1 US 48255606 A US48255606 A US 48255606A US 2007028112 A1 US2007028112 A1 US 2007028112A1
Authority
US
United States
Prior art keywords
data
transfer device
storage medium
memory
data transfer
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Abandoned
Application number
US11/482,556
Inventor
John Mackelden
Nigel Evans
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
Hewlett Packard Development Co LP
Original Assignee
Hewlett Packard Development Co LP
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Priority to GB0515734A priority Critical patent/GB2429308B/en
Priority to GB0515734.2 priority
Application filed by Hewlett Packard Development Co LP filed Critical Hewlett Packard Development Co LP
Assigned to HEWLETT-PACKARD DEVELOPMENT COMPANY, L.P. reassignment HEWLETT-PACKARD DEVELOPMENT COMPANY, L.P. ASSIGNMENT BY OPERATION OF LAW Assignors: EVANS, NIGEL RONALD, MACKELDEN, JOHN MARK
Publication of US20070028112A1 publication Critical patent/US20070028112A1/en
Application status is Abandoned legal-status Critical

Links

Images

Classifications

    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L9/00Cryptographic mechanisms or cryptographic arrangements for secret or secure communication
    • H04L9/08Key distribution or management, e.g. generation, sharing or updating, of cryptographic keys or passwords
    • H04L9/0894Escrow, recovery or storing of secret information, e.g. secret key escrow or cryptographic key storage
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L2209/00Additional information or applications relating to cryptographic mechanisms or cryptographic arrangements for secret or secure communication H04L9/00
    • H04L2209/80Wireless
    • H04L2209/805Lightweight hardware, e.g. radio-frequency identification [RFID] or sensor

Abstract

A data transfer device for transferring data between a host device and a data storage medium. The data transfer device encrypts and/or decrypts data transferred between the host device and the data storage medium using an encryption/decryption key stored in memory. A data storage medium stores an encryption/decryption key and has at least one media recognition indicium, which identifies the data storage medium to the data transfer device as one storing an encryption/decryption key. The data transfer device copies the encryption/decryption key from the data storage medium to the memory.

Description

    FIELD OF THE INVENTION
  • The present invention relates to a data transfer device for transferring data between a host device and a data storage medium, wherein data are encrypted or decrypted by the data transfer device.
  • BACKGROUND OF THE INVENTION
  • Data backup is a valuable tool in safeguarding important data. Data are generally backed-up onto portable data storage media, such as tape cartridges or optical discs, such that the backup data may be stored at a different geographical location to the primary data.
  • By storing important data onto portable data storage media, security issues become a consideration. For example, a visitor to a site might easily pocket a tape cartridge storing large amounts of commercially sensitive data.
  • Many backup software packages provide the option of encrypting data prior to backup. A drawback with this approach, however, is that the same software package must be used in order to retrieve and decrypt the backup data. Accordingly, backup data cannot be recovered using other legitimate systems where the backup software is not provided.
  • SUMMARY OF THE INVENTION
  • The present invention provides a data transfer device for transferring data between a host device and a data storage medium, the data transfer device comprising a memory and being operable to: copy an encryption key from a data storage medium to the memory; receive data from the host device; encrypt the data using the encryption key stored in the memory; and store the encrypted data on a data storage medium.
  • Preferably, the data transfer device is operable to store the encrypted data on a data storage medium different to that from which the encryption key is copied.
  • Advantageously, the data transfer device includes a media recognition sensor for sensing features on or in a data storage medium and for identifying the data storage medium as an encryption data storage medium storing an encryption key, and the data transfer device is operable to copy an encryption key from a data storage medium to the memory only when identified as an encryption data storage medium.
  • Conveniently, the memory is removable and the data transfer device comprises a port for removably receiving the memory.
  • Preferably, the data transfer device is further operable to receive an encryption key from the host device and to store the received encryption key in the memory.
  • Advantageously, the memory is erasable to erase the encryption key stored in the memory, and the data transfer device is operable to store the data unencrypted on the data storage medium if no encryption key is stored in the memory.
  • Conveniently, the data transfer device is further operable to: retrieve encrypted data from a data storage medium; decrypt the encrypted data using the encryption key stored in the memory; and deliver the decrypted data to the host device.
  • Preferably, the data transfer device is further operable to: copy a decryption key from a data storage medium to the memory; and decrypt the encrypted data using the decryption key stored in the memory.
  • Advantageously, the data transfer device is further operable to receive a decryption key from the host device and to store the received decryption key in the memory.
  • Conveniently, the memory is erasable to erase the decryption key stored in the memory, and the data transfer device is operable to deliver the encrypted data undecrypted to the host device if no decryption key is stored in the memory.
  • Preferably, the memory is erasable to erase the decryption key stored in the memory, and the data transfer device is operable to determine if data retrieved from the data storage medium are encrypted and to return an error to the host device if the retrieved data are encrypted and no decryption key is stored in the memory.
  • Advantageously, the data transfer device is operable to: apply at least one error control code to the data received from the host device prior to encryption; analyse the error control code of the decrypted data to determine whether the encrypted data retrieved from the data storage medium have been successfully decrypted; deliver the decrypted data to the host device if the encrypted data have been successfully decrypted; and deliver an error to the host device if the encrypted data have not been successfully decrypted.
  • Conveniently, the data transfer device is operable to: retrieve data from a data storage medium; determine if the retrieved data are encrypted; decrypt the retrieved data and deliver the decrypted data to the host device if the retrieved data are encrypted; and deliver the retrieved data to the host device if the retrieved data are not encrypted.
  • Preferably, the data transfer device is a tape drive.
  • Another aspect of the present invention provides a data transfer device for transferring data between a host device and a data storage medium, the data transfer device comprising: means for storing a key; means for copying an encryption key from a data storage medium to the means for storing a key; means for receiving data from the host device; means for encrypting the data using the encryption key stored in the means for storing a key; and means for storing the encrypted data on a data storage medium.
  • Preferably, the data transfer device comprises: means for sensing features on or in a data storage medium for identifying the data storage medium as an encryption data storage medium storing an encryption key, wherein the means for copying copies an encryption key from a data storage medium to the means for storing a key only when the means for sensing identifies the data storage medium as an encryption data storage medium.
  • A further aspect of the present invention provides a computer program product storing computer program code executable by a data transfer device, wherein the data transfer device comprises a memory and is operable to transfer data between a host device and a data storage medium, and the computer program code when executed causes the data transfer device to: copy an encryption key from a data storage medium to the memory; receive data from the host device; encrypt the data using the encryption key stored in the memory; and store the encrypted data on a data storage medium.
  • Preferably, the computer program code when executed additionally causes the data transfer device to: sense features on or in a data storage medium to identify the data storage medium as an encryption data storage medium storing an encryption key, wherein the encryption key is copied from a data storage medium to the memory only when the data storage medium is identified as an encryption data storage medium.
  • A still further aspect of the present invention provides a data storage medium storing at least one of an encryption key and a decryption key and having at least one media recognition indicium which may be sensed by a media recognition sensor of a data transfer device for identifying the data storage medium to the data transfer device as one storing at least one of an encryption key and a decryption key.
  • Preferably, the data storage medium is removable and/or portable.
  • Advantageously, the data storage medium is a tape cartridge.
  • BRIEF DESCRIPTION OF THE DRAWINGS
  • In order that the present invention may be more readily understood, embodiments thereof will now be described, by way of example, with reference to the accompanying drawings, in which:
  • FIG. 1 is a schematic block diagram of a tape drive embodying the present invention;
  • FIG. 2 is a flow diagram illustrating a method performed by the tape drive of FIG. 1 when reading data from a tape cartridge;
  • FIG. 3 is a flow diagram illustrating a method performed by the tape drive of FIG. 1 when writing data to a tape cartridge; and
  • FIG. 4 is perspective view from below of an encryption/decryption tape cartridge embodying the present invention.
  • DETAILED DESCRIPTION
  • The tape drive 1 of FIG. 1 comprises an input/output interface 2, a controller 3, a first non-volatile memory 4, a second non-volatile memory 5, a memory buffer 6, a read/write channel 7, and a cartridge loader 8, which comprises a drive mechanism 9, a media recognition sensor 10 and a magnetic read/write head 11.
  • The input/output interface 2 controls the transfer of data between the tape drive 1 and a host device 12, such as a host computer. Control signals received from the host device 12 by the interface 2 are delivered to the controller 3, which, in response, controls the operation of the tape drive 1, i.e. the interface 2, read/write channel 7 and the cartridge loader 8.
  • The controller 3 comprises a microprocessor, which executes instructions stored in the first non-volatile memory 4. The instructions stored in the first non-volatile memory 4 are generally referred to as firmware and in order to better distinguish the first non-volatile memory 4 from the second non-volatile memory 5, the first non-volatile memory 4 shall hereafter be referred to as firmware memory 4.
  • The second non-volatile memory 5 stores an encryption key and/or a decryption key. As described in further detail below, the controller 3 uses the encryption key and/or decryption when reading data from and writing data to a tape cartridge. For the purposes of brevity, as well as to better distinguish the first and second non-volatile memories 4,5, the second non-volatile memory 5 shall hereafter be referred to as key memory 5.
  • The cartridge loader 8 is responsible for mounting and subsequently ejecting a tape cartridge onto which data are to be stored and retrieved. When a tape cartridge is inserted into the tape drive 1, the drive mechanism 9 winds the tape about a drum onto which the magnetic read/write head 11 is mounted. The drive mechanism 9 is also responsible for winding the tape forwards and backwards, as required. When the tape cartridge is inserted into the tape drive 1, the media recognition sensor 10 senses indicia on or in the tape cartridge (e.g. media identification holes formed on the casing of the tape cartridge) and, in response, outputs a signal to the controller 3 which then identifies the type and format of cartridge that has been inserted. It should be appreciated that the media recognition sensor 10 need not sense only physical features of the indicia as exemplified by the media identification holes but could also or alternatively sense and recognise the media by other mechanisms such as optically or electromagnetically, by, for example, a specially recorded magnetic pattern or a CIP code—a CIP code is a Cartridge Identifier Pattern, for example, a bar code on the start of the media optically read by the drive.
  • Operation of the tape drive 1, and in particular the controller 3 in executing the firmware instructions stored in firmware memory 4, will now be described with reference to FIGS. 2 and 3.
  • In response to receiving 100 a write data signal from the host device 12, the controller 3 determines 101 whether or not an encryption key is stored in the key memory 5. If no encryption key is stored, the data received from the host device 12 by the interface 2 are read 102 directly by the read-write channel 6. The read/write channel 6 then encodes the data and converts the encoded data into electrical signals suitable for driving 103 the magnetic read/write head 11. If, however, an encryption key is stored in key memory 5, the controller 3 encrypts 104 the data received from the host device 12 using the encryption key and stores the encrypted data in the memory buffer 6. Once encrypted, the read/write channel 3 reads 105 the encrypted data from the memory buffer 6, encodes the encrypted data and then converts the encoded, encrypted data into electrical signals suitable for driving 106 the magnetic read/write head 11.
  • The controller 3 applies error control coding by, for example, embedding or appending 107 redundancy data (e.g. checksum data) to the data received from the host device 12 prior to encryption. As detailed below, the inclusion of redundancy data enables the tape drive I to determine whether encrypted data later retrieved from a tape cartridge have been successfully decrypted.
  • In response to receiving a read data signal 110 from the host device 12, the controller 3 controls the cartridge loader 8, and in particular the drive mechanism 9, such that the tape is positioned over the magnetic read/write head 11 at the relevant position at which the requested data are stored. The tape is then wound forwards/backwards and the magnetic read/write head 11 reads 111 the data from the tape. The read/write channel 7 converts the resulting analogue signal received from the magnetic read/write head 11 into digital data, which are then decoded by the read/write channel 7 and stored in the memory buffer 6.
  • The controller 3 then determines 112 whether or not the data stored in the memory buffer 6 are encrypted. If the data are not encrypted, the data are delivered 113 to the host device 12 via the interface. If, however, the data are encrypted, the controller 3 determines 114 whether or not a decryption key is stored in the key memory 5. If no decryption key is stored, the controller 3 delivers 115 an error signal to the host device 12 via the interface 2 to indicate that the requested data are encrypted and that no decryption key could be found.
  • If a decryption key is stored in the key memory 5, the controller 3 decrypts 116 the encrypted data using the decryption key, stores the decrypted data in the memory buffer 6, and delivers 117 the decrypted data from the memory buffer 6 to the host device 12 via the interface 2.
  • As noted above, when writing data to a tape cartridge, the controller 3 embeds or appends 107 redundancy data to the data to be stored prior to encryption. In this preferred embodiment, when reading data from the tape cartridge, the controller 3 compares 118 the redundancy data of the decrypted data to that expected had the decryption process been successful. For example, where the redundancy data comprise cyclic redundancy checksum (CRC) data, the controller calculates the CRC data for the decrypted data and compares this against the actual CRC data that are embedded or appended to the decrypted data. If the redundancy data of the decrypted data correspond to that expected, the decrypted data (i.e. without the redundancy data) are delivered 117 from the memory buffer 6 to the host device 12 via the interface 2. If, however, the redundancy data of the decrypted data do not correspond to that expected, the controller 3 delivers 119 an error signal to the host device 12 via the interface 2 to indicate that the requested data could not be successfully decrypted. Unsuccessful decryption may arise because the wrong decryption key was used to decrypt the data and/or the encrypted data read from the tape cartridge were corrupt.
  • The encryption and decryption keys that are stored in the key memory 5 may be delivered to the tape drive 1 by the host device 12 via the input/output interface 2. In particular, the controller 3 may be operable to receive a control signal from the host 12 to store an encryption key or decryption key delivered by the host 12, or to delete an encryption key or decryption key stored in the key memory 5.
  • Alternatively or additionally, the encryption and decryption keys are delivered to the tape drive 1 by means of an encryption/decryption tape cartridge 20. As illustrated in FIG. 4, the encryption/decryption tape cartridge 20 has particular indicia, such as a particular arrangement of recognition holes 21 or reflective regions 22, that are discernible by the media recognition sensor 10 for identifying the cartridge 20 as an encryption/decryption cartridge 20.
  • The encryption/decryption cartridge 20 stores at least one encryption or decryption key, or at least one pair of an encryption key and its corresponding decryption key. The cartridge 20 may also store usage information, such as whether the encryption/decryption key stored thereon has previously been used, the date and time when the key was used etc., which is written to the cartridge 20 by the tape drive 1 upon usage.
  • Upon inserting the encryption/decryption cartridge 20 into the drive 1, the controller 3 identifies the cartridge 20 as an encryption/decryption cartridge by means of a signal delivered by the media recognition sensor 10. Encryption/decryption key data stored on the cartridge 20 are then read by the magnetic read/write head 11 and read/write channel 7 and stored in the key memory 5. Previous key data stored in the key memory 5 are overwritten. Once the key data have been read from the cartridge 20, the cartridge 20 is automatically ejected by the tape drive 1 to indicate that the key data have been successfully read.
  • Importantly, the tape drive 1 copies the encryption/decryption key data from the cartridge 20 to the key memory 5 without involving the host device 12. In particular, the encryption/decryption key data are not sent by the tape drive 1 to the host device 12. Consequently, the resources of the host device 12 are not unnecessarily consumed by receiving the encryption/decryption key data from the tape drive 1, appending the key data to a control signal, and delivering the control signal and key data to the tape drive 1. Additionally, by copying the encryption/decryption key data directly from the cartridge 20 to the key memory 5 without involving the host device 12, the encryption and decryption keys used by the tape drive 1 to encrypt and decrypt data may be set and changed without the need for a special command or control signal to be issued by the host device 1. Consequently, the tape drive 1 is able to encrypt and decrypt data using the commands and control signals of conventional peripheral interfaces (e.g. SCSI, PCI, IDE, EISA, USB, FireWire®, Bluetooth®, etc.). To this end, no modification in the behaviour of the host device 12 is required. Instead, the host device 12 communicates with the tape drive 1 in the same manner as that for a conventional tape drive. A further advantage of copying the encryption/decryption key data directly from the cartridge 20 to the key memory 5 is that there is no risk of the encryption/decryption key data being intercepted by a third party, e.g. by intercepting wireless or network data packets.
  • The tape drive 1 may include user input/output means (not shown) for providing a user with an indication of the status of the tape drive 1 and/or for providing the user with means to switch the tape drive 1 between an encryption/decryption mode and a normal mode, in which no encryption/decryption takes place. For example, the tape drive 1 may include one or more LEDs that are illuminated during use to indicate the status of the tape drive 1. For example, a particular LED may be illuminated to indicate that key data have been successfully read from an encryption/decryption cartridge 20. Additionally, different coloured LEDs may be used to indicate whether data being stored to or retrieved from a tape cartridge are encrypted or unencrypted.
  • The tape drive 1 may additionally include a button which when depressed causes the contents of the key memory 5 to be erased. In this manner, a user can quickly switch the tape drive 1 from an encryption/decryption mode to a normal mode. Alternatively, or additionally, the tape drive 1 may include a switch that is switchable between two positions to cause the tape drive 1 to operate in either an encryption/decryption mode or a normal mode. When the position of the switch indicates encryption/decryption mode, the tape drive 1 behaves as described above. When the position of the switch indicates normal mode, the controller 3 is caused to ignores the contents of the key memory 5 and to proceed as if no key data were stored in the key memory 5.
  • The tape drive 1 may alternatively or additionally communicate with the host device 12 for providing a user with an indication of the status of the tape drive 1 and/or for providing the user with means to switch the tape drive 1 between an encryption/decryption mode and a normal mode. For example, the controller 3 may deliver a message signal to the host device 12 to indicate that key data has been successfully read from the encryption/decryption cartridge 20. Additionally, the controller 3 may request confirmation from the host device 12 that key data already stored in the key memory 5 are to be overwritten, or to confirm which key data stored on an encryption/decryption cartridge 20 are to be retrieved (e.g. encryption key, decryption key or both). The controller 3 may also be operable to receive a request from the host device 12 to delete key data stored in the key memory 5, so as to switch from an encryption/decryption mode to a normal mode. Alternatively, or additionally, the controller 3 may be operable to receive a request from the host device 12 to ignore key data stored in the key memory 5; this may be achieved, for example, by storing flag data in the key memory 5 that notifies the controller that key data are to be ignored.
  • Key data stored in the key memory 5 may alternatively be erased by means a key-eraser cartridge (not shown). The key-eraser cartridge, like that of the encryption/decryption cartridge 20, includes indicia on or in the cartridge that are recognisable by the media recognition sensor 10. Accordingly, when the key-eraser cartridge is inserted into the tape drive 1, the controller 3 (by means of the media recognition sensor 10) recognises the cartridge as a key-eraser cartridge and in response deletes the contents of the key memory 5. The key-eraser cartridge is therefore used to switch the mode of the tape drive 1 from encryption/decryption to normal.
  • The encryption/decryption cartridge 20 may serve as a key-eraser cartridge by including user-changeable media recognition indicia 23 (e.g. a slideable tab portion). Upon changing the arrangement of the user-changeable media recognition indicia 23 (e.g. by sliding the slideable tab portion), the cartridge 20 is recognised by the media recognition sensor 10 as a key-eraser cartridge rather than an encryption/decryption cartridge.
  • In large-scale systems, in which the backup of data is performed by a plurality of tape drives 1, the same encryption/decryption cartridge 20 may be used with each of the plurality of tape drive 1 such that all backup data are encrypted (or decrypted) using the same encryption key (or decryption key). Additionally, should a tape drive 1 need to be replaced, the replacement tape drive may be programmed with the same encryption and/or decryption key as that of the former tape drive 1 through the use of the same encryption/decryption cartridge 20.
  • Whilst reference has thus far been made to an encryption key and a separate decryption key, it should of course be appreciated that for symmetric encryption the same key is used for both the encryption key and decryption. Consequently, where the tape drive 1 employs a symmetric encryption algorithm, only a single key need by stored in the key memory 5 or on the encryption/decryption cartridge 20. Asymmetric encryption, however, has an advantage that the tape drive 1 may be configured to permit encryption only. Consequently, the tape drive 1 cannot be used by unauthorised persons to decrypt stored data.
  • In the embodiments described above, the firmware (i.e. the instructions to be executed by the controller 3) and the key data are stored in two separate non-volatile memories 4,5. It will, however, be appreciated that both the firmware and the key data may be stored in a single, partitioned non-volatile memory.
  • Alternatively, the key memory 5 may be removable from the tape drive 1. In particular, the key memory 5 may comprise a removable programmable memory device, such as a USB memory device or other flash memory device. Accordingly, rather than using an encryption/decryption cartridge 20 to write encryption/decryption key data to the key memory 5, the key memory 5 may be removed from the tape drive 1 and key data written to or deleted from the key memory 5 by means of a suitable writer. For example, where the key memory 5 comprises a USB memory device, the key memory 5 may be inserted into the USB slot of a computer and encryption/decryption key data written to or deleted from the key memory 5 by the computer.
  • Although embodiments of the present invention have been described with reference to a tape drive 1 and an encryption/decryption tape cartridge 20, it will be appreciated that aspects of the invention are relevant to other types of data transfer devices, such as optical drives, as well as to other types of portable data storage media, e.g. optical discs (e.g. CD, DVD).
  • With the data transfer device embodying the present invention, the encryption and decryption of backup data is moved from the host device to the data transfer device. The data transfer device does not rely upon special commands or control signals in order to encrypt or decrypt data, but instead encrypts and decrypts data in response to conventional read and write commands received from the host device. Accordingly, the data transfer device is capable of operating using standard hardware interfaces such as SCSI, PCI, IDE, EISA, USB, FireWire®, Bluetooth®, IrDA etc. By moving the encryption/decryption process to the data transfer device, data from a host device may be stored on a portable data storage medium and later retrieved by a different host device having a different operating system and/or backup software. Moreover, the data transfer device enables backup data to be encrypted/decrypted by host devices having software that does not provide for data encryption/decryption.
  • When used in this specification and claims, the terms “comprises” and “comprising” and variations thereof mean that the specified features, steps or integers are included. The terms are not to be interpreted to exclude the presence of other features, steps or components.
  • The features disclosed in the foregoing description, or the following claims, or the accompanying drawings, expressed in their specific forms or in terms of a means for performing the disclosed function, or a method or process for attaining the disclosed result, as appropriate, may, separately, or in any combination of such features, be utilised for realising the invention in diverse forms thereof.

Claims (19)

1. A data transfer device for transferring data between a host device and a data storage medium, the data transfer device comprising a memory and being operable to:
copy an encryption key from a data storage medium to the memory;
receive data from the host device;
encrypt the data using the encryption key stored in the memory; and
store the encrypted data on a data storage medium.
2. A data transfer device according to claim 1, wherein the data transfer device is operable to store the encrypted data on a data storage medium different to that from which the encryption key is copied.
3. A data transfer device according to claim 1, wherein the data transfer device includes a media recognition sensor for sensing features on or in a data storage medium and for identifying the data storage medium as an encryption data storage medium storing an encryption key, and the data transfer device is operable to copy an encryption key from a data storage medium to the memory only when identified as an encryption data storage medium.
4. A data transfer device according to claim 1, wherein the memory is removable and the data transfer device comprises a port for removably receiving the memory.
5. A data transfer device according to claim 1, wherein the data transfer device is further operable to receive an encryption key from the host device and to store the received encryption key in the memory.
6. A data transfer device according to claim 1, wherein the memory is erasable to erase the encryption key stored in the memory, and the data transfer device is operable to store the data unencrypted on the data storage medium if no encryption key is stored in the memory.
7. A data transfer device according to claim 1, wherein the data transfer device is further operable to:
retrieve encrypted data from a data storage medium;
decrypt the encrypted data using the encryption key stored in the memory; and
deliver the decrypted data to the host device.
8. A data transfer device according to claim 7, wherein the data transfer device is further operable to:
copy a decryption key from a data storage medium to the memory; and
decrypt the encrypted data using the decryption key stored in the memory.
9. A data transfer device according to claim 7, wherein the data transfer device is further operable to receive a decryption key from the host device and to store the received decryption key in the memory.
10. A data transfer device according to claim 8, wherein the memory is erasable to erase the decryption key stored in the memory, and the data transfer device is operable to deliver the encrypted data undecrypted to the host device if no decryption key is stored in the memory.
11. A data transfer device according to claim 8, wherein the memory is erasable to erase the decryption key stored in the memory, and the data transfer device is operable to determine if data retrieved from the data storage medium are encrypted and to return an error to the host device if the retrieved data are encrypted and no decryption key is stored in the memory.
12. A data transfer device according to claim 7, wherein the data transfer device is operable to:
apply at least one error control code to the data received from the host device prior to encryption;
analyse the error control code of the decrypted data to determine whether the encrypted data retrieved from the data storage medium have been successfully decrypted;
deliver the decrypted data to the host device if the encrypted data have been successfully decrypted; and
deliver an error to the host device if the encrypted data have not been successfully decrypted.
13. A data transfer device according to claim 1, wherein the data transfer device is operable to:
retrieve data from a data storage medium;
determine if the retrieved data are encrypted;
decrypt the retrieved data and deliver the decrypted data to the host device if the retrieved data are encrypted; and
deliver the retrieved data to the host device if the retrieved data are not encrypted.
14. A data transfer device according to claim 1, wherein the data transfer device is a tape drive.
15. A computer program product storing computer program code executable by a data transfer device, wherein the data transfer device comprises a memory and is operable to transfer data between a host device and a data storage medium, and the computer program code when executed causes the data transfer device to:
copy an encryption key from a data storage medium to the memory;
receive data from the host device;
encrypt the data using the encryption key stored in the memory; and
store the encrypted data on a data storage medium.
16. A computer program product according to claim 15, wherein the computer program code when executed additionally causes the data transfer device to:
sense features on or in a data storage medium to identify the data storage medium as an encryption data storage medium storing an encryption key,
wherein the encryption key is copied from a data storage medium to the memory only when the data storage medium is identified as an encryption data storage medium.
17. A data storage medium storing at least one of an encryption key and a decryption key and having at least one media recognition indicium which may be sensed by a media recognition sensor of a data transfer device for identifying the data storage medium to the data transfer device as one storing at least one of an encryption key and a decryption key.
18. A data storage medium according to claim 17, wherein the data storage medium is portable.
19. A data storage medium according to claim 17, wherein the data storage medium is a tape cartridge.
US11/482,556 2005-07-29 2006-07-06 Data transfer device Abandoned US20070028112A1 (en)

Priority Applications (2)

Application Number Priority Date Filing Date Title
GB0515734A GB2429308B (en) 2005-07-29 2005-07-29 Data transfer device
GB0515734.2 2005-07-29

Publications (1)

Publication Number Publication Date
US20070028112A1 true US20070028112A1 (en) 2007-02-01

Family

ID=34983818

Family Applications (1)

Application Number Title Priority Date Filing Date
US11/482,556 Abandoned US20070028112A1 (en) 2005-07-29 2006-07-06 Data transfer device

Country Status (2)

Country Link
US (1) US20070028112A1 (en)
GB (1) GB2429308B (en)

Cited By (12)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US20090232300A1 (en) * 2008-03-14 2009-09-17 Mcafee, Inc. Securing data using integrated host-based data loss agent with encryption detection
US20100229006A1 (en) * 2009-03-04 2010-09-09 Byeong Hoon Lee Memory for Protecting Data, Memory System Including the Memory, and Method of Driving the Memory
US20110010565A1 (en) * 2009-07-07 2011-01-13 Fujitsu Limited Apparatus and method for storing key data, library unit, and storage device
US20110154052A1 (en) * 2009-12-23 2011-06-23 Quantum Corporation Media-following encryption policy control
US20120079289A1 (en) * 2010-09-27 2012-03-29 Skymedi Corporation Secure erase system for a solid state non-volatile memory device
CN102930229A (en) * 2011-01-18 2013-02-13 苏州国芯科技有限公司 Office system for improving data security
US8590002B1 (en) 2006-11-29 2013-11-19 Mcafee Inc. System, method and computer program product for maintaining a confidentiality of data on a network
US8621008B2 (en) 2007-04-26 2013-12-31 Mcafee, Inc. System, method and computer program product for performing an action based on an aspect of an electronic mail message thread
US8713468B2 (en) 2008-08-06 2014-04-29 Mcafee, Inc. System, method, and computer program product for determining whether an electronic mail message is compliant with an etiquette policy
US9215197B2 (en) 2007-08-17 2015-12-15 Mcafee, Inc. System, method, and computer program product for preventing image-related data loss
US20170099274A1 (en) * 2015-06-09 2017-04-06 Verizon Patent And Licensing Inc. Call encryption systems and methods
US10198587B2 (en) 2007-09-05 2019-02-05 Mcafee, Llc System, method, and computer program product for preventing access to data with respect to a data access attempt associated with a remote data sharing session

Families Citing this family (2)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US10073743B2 (en) 2006-07-26 2018-09-11 Hewlett Packard Enterprise Development Lp Data storage arrangement and key distribution
GB2431249A (en) 2005-10-11 2007-04-18 Hewlett Packard Development Co Removable data storage item and key distribution

Citations (33)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US4863114A (en) * 1988-06-17 1989-09-05 Minnesota Mining And Manufacturing Company Magnetic tape cartridge identification
US5111504A (en) * 1990-08-17 1992-05-05 General Instrument Corporation Information processing apparatus with replaceable security element
US5235641A (en) * 1990-03-13 1993-08-10 Hitachi, Ltd. File encryption method and file cryptographic system
US5237611A (en) * 1992-07-23 1993-08-17 Crest Industries, Inc. Encryption/decryption apparatus with non-accessible table of keys
US5239437A (en) * 1991-08-12 1993-08-24 Minnesota Mining And Manufacturing Company Self identifying universal data storage element
US5327305A (en) * 1992-08-14 1994-07-05 Conner Peripherals, Inc. Tape format detection system
US5552776A (en) * 1991-09-23 1996-09-03 Z-Microsystems Enhanced security system for computing devices
US5584023A (en) * 1993-12-27 1996-12-10 Hsu; Mike S. C. Computer system including a transparent and secure file transform mechanism
US5651064A (en) * 1995-03-08 1997-07-22 544483 Alberta Ltd. System for preventing piracy of recorded media
US5905798A (en) * 1996-05-02 1999-05-18 Texas Instruments Incorporated TIRIS based kernal for protection of "copyrighted" program material
US6134660A (en) * 1997-06-30 2000-10-17 Telcordia Technologies, Inc. Method for revoking computer backup files using cryptographic techniques
US6199163B1 (en) * 1996-03-26 2001-03-06 Nec Corporation Hard disk password lock
US20010019614A1 (en) * 2000-10-20 2001-09-06 Medna, Llc Hidden Link Dynamic Key Manager for use in Computer Systems with Database Structure for Storage and Retrieval of Encrypted Data
US6343282B1 (en) * 1995-10-09 2002-01-29 Matsushita Electric Industrial Co., Ltd. Optical disk reading device using both a decipher key and disk identification information
US6357005B1 (en) * 1996-07-26 2002-03-12 Oberthur Card Systems Sa System for the secure CD-ROM storage of data
US20020139861A1 (en) * 1997-12-22 2002-10-03 Kenji Matsumoto Ic card information display device and ic card for use therewith
US6473861B1 (en) * 1998-12-03 2002-10-29 Joseph Forte Magnetic optical encryption/decryption disk drive arrangement
US20030070083A1 (en) * 2001-09-28 2003-04-10 Kai-Wilhelm Nessler Method and device for encryption/decryption of data on mass storage device
US20030074319A1 (en) * 2001-10-11 2003-04-17 International Business Machines Corporation Method, system, and program for securely providing keys to encode and decode data in a storage cartridge
US20040103292A1 (en) * 2002-08-27 2004-05-27 Fuji Photo Film U.S.A., Inc. Recording method, recording system, and reproducing system of encryption data
US20040101140A1 (en) * 2002-11-25 2004-05-27 Fuji Photo Film Co., Ltd. Recording medium cartridge and a recording-and-reproducing apparatus thereof
US20040103065A1 (en) * 2002-11-21 2004-05-27 Capital One Financial Corporation Systems and methods for soliciting customers using computer readable media
US20040107340A1 (en) * 2000-11-03 2004-06-03 Shuning Wann Real time data encryption/decryption system and method for IDE/ATA data transfer
US20040190860A1 (en) * 2003-03-31 2004-09-30 Fusao Ishiguchi Equipment for digital video disc processing information on digital video disc using prescribed information serving as key, and method and apparatus for recording prescribed information
US20050071591A1 (en) * 2003-09-29 2005-03-31 International Business Machines (Ibm) Corporation Security in an automated data storage library
US20050091171A1 (en) * 2003-10-28 2005-04-28 Grobman Steven L. Server pool kerberos authentication scheme
US6889324B1 (en) * 1998-11-17 2005-05-03 Ricoh Company, Ltd. Digital measurement apparatus and image measurement apparatus
US20050117466A1 (en) * 2003-12-02 2005-06-02 Doug Strachota System and method for converting a CD collection to a different media or format
US6907125B1 (en) * 1997-12-09 2005-06-14 Canon Kabushiki Kaisha Apparatus and method for processing information and correcting an error in a decrypted error correction code
US20050152670A1 (en) * 2004-01-14 2005-07-14 Quantum Corporation Auxiliary memory in a tape cartridge
US20050259816A1 (en) * 2003-11-12 2005-11-24 Samsung Electronics Co., Ltd. Method and apparatus for restriction use of storage medium using user key
US20050278257A1 (en) * 2004-06-10 2005-12-15 Barr David A Content security system for screening applications
US7031470B1 (en) * 1998-01-22 2006-04-18 Nds Limited Protection of data on media recording disks

Family Cites Families (5)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
GB2315575A (en) * 1996-07-19 1998-02-04 Ibm Encryption circuit in I/O subsystem
US20020188856A1 (en) * 2001-06-11 2002-12-12 Brian Worby Storage device with cryptographic capabilities
JP3735300B2 (en) * 2002-01-31 2006-01-18 富士通株式会社 Access restriction information recording and reproducing system and method access restriction
CN1826569A (en) * 2003-07-22 2006-08-30 皇家飞利浦电子股份有限公司 Record carrier, read-out device and method for reading carrier data and network data
JP4698982B2 (en) * 2004-04-06 2011-06-08 株式会社日立製作所 Storage system that performs cryptographic processing

Patent Citations (33)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US4863114A (en) * 1988-06-17 1989-09-05 Minnesota Mining And Manufacturing Company Magnetic tape cartridge identification
US5235641A (en) * 1990-03-13 1993-08-10 Hitachi, Ltd. File encryption method and file cryptographic system
US5111504A (en) * 1990-08-17 1992-05-05 General Instrument Corporation Information processing apparatus with replaceable security element
US5239437A (en) * 1991-08-12 1993-08-24 Minnesota Mining And Manufacturing Company Self identifying universal data storage element
US5552776A (en) * 1991-09-23 1996-09-03 Z-Microsystems Enhanced security system for computing devices
US5237611A (en) * 1992-07-23 1993-08-17 Crest Industries, Inc. Encryption/decryption apparatus with non-accessible table of keys
US5327305A (en) * 1992-08-14 1994-07-05 Conner Peripherals, Inc. Tape format detection system
US5584023A (en) * 1993-12-27 1996-12-10 Hsu; Mike S. C. Computer system including a transparent and secure file transform mechanism
US5651064A (en) * 1995-03-08 1997-07-22 544483 Alberta Ltd. System for preventing piracy of recorded media
US6343282B1 (en) * 1995-10-09 2002-01-29 Matsushita Electric Industrial Co., Ltd. Optical disk reading device using both a decipher key and disk identification information
US6199163B1 (en) * 1996-03-26 2001-03-06 Nec Corporation Hard disk password lock
US5905798A (en) * 1996-05-02 1999-05-18 Texas Instruments Incorporated TIRIS based kernal for protection of "copyrighted" program material
US6357005B1 (en) * 1996-07-26 2002-03-12 Oberthur Card Systems Sa System for the secure CD-ROM storage of data
US6134660A (en) * 1997-06-30 2000-10-17 Telcordia Technologies, Inc. Method for revoking computer backup files using cryptographic techniques
US6907125B1 (en) * 1997-12-09 2005-06-14 Canon Kabushiki Kaisha Apparatus and method for processing information and correcting an error in a decrypted error correction code
US20020139861A1 (en) * 1997-12-22 2002-10-03 Kenji Matsumoto Ic card information display device and ic card for use therewith
US7031470B1 (en) * 1998-01-22 2006-04-18 Nds Limited Protection of data on media recording disks
US6889324B1 (en) * 1998-11-17 2005-05-03 Ricoh Company, Ltd. Digital measurement apparatus and image measurement apparatus
US6473861B1 (en) * 1998-12-03 2002-10-29 Joseph Forte Magnetic optical encryption/decryption disk drive arrangement
US20010019614A1 (en) * 2000-10-20 2001-09-06 Medna, Llc Hidden Link Dynamic Key Manager for use in Computer Systems with Database Structure for Storage and Retrieval of Encrypted Data
US20040107340A1 (en) * 2000-11-03 2004-06-03 Shuning Wann Real time data encryption/decryption system and method for IDE/ATA data transfer
US20030070083A1 (en) * 2001-09-28 2003-04-10 Kai-Wilhelm Nessler Method and device for encryption/decryption of data on mass storage device
US20030074319A1 (en) * 2001-10-11 2003-04-17 International Business Machines Corporation Method, system, and program for securely providing keys to encode and decode data in a storage cartridge
US20040103292A1 (en) * 2002-08-27 2004-05-27 Fuji Photo Film U.S.A., Inc. Recording method, recording system, and reproducing system of encryption data
US20040103065A1 (en) * 2002-11-21 2004-05-27 Capital One Financial Corporation Systems and methods for soliciting customers using computer readable media
US20040101140A1 (en) * 2002-11-25 2004-05-27 Fuji Photo Film Co., Ltd. Recording medium cartridge and a recording-and-reproducing apparatus thereof
US20040190860A1 (en) * 2003-03-31 2004-09-30 Fusao Ishiguchi Equipment for digital video disc processing information on digital video disc using prescribed information serving as key, and method and apparatus for recording prescribed information
US20050071591A1 (en) * 2003-09-29 2005-03-31 International Business Machines (Ibm) Corporation Security in an automated data storage library
US20050091171A1 (en) * 2003-10-28 2005-04-28 Grobman Steven L. Server pool kerberos authentication scheme
US20050259816A1 (en) * 2003-11-12 2005-11-24 Samsung Electronics Co., Ltd. Method and apparatus for restriction use of storage medium using user key
US20050117466A1 (en) * 2003-12-02 2005-06-02 Doug Strachota System and method for converting a CD collection to a different media or format
US20050152670A1 (en) * 2004-01-14 2005-07-14 Quantum Corporation Auxiliary memory in a tape cartridge
US20050278257A1 (en) * 2004-06-10 2005-12-15 Barr David A Content security system for screening applications

Cited By (22)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US8590002B1 (en) 2006-11-29 2013-11-19 Mcafee Inc. System, method and computer program product for maintaining a confidentiality of data on a network
US8943158B2 (en) 2007-04-26 2015-01-27 Mcafee, Inc. System, method and computer program product for performing an action based on an aspect of an electronic mail message thread
US8621008B2 (en) 2007-04-26 2013-12-31 Mcafee, Inc. System, method and computer program product for performing an action based on an aspect of an electronic mail message thread
US9215197B2 (en) 2007-08-17 2015-12-15 Mcafee, Inc. System, method, and computer program product for preventing image-related data loss
US10198587B2 (en) 2007-09-05 2019-02-05 Mcafee, Llc System, method, and computer program product for preventing access to data with respect to a data access attempt associated with a remote data sharing session
US9843564B2 (en) 2008-03-14 2017-12-12 Mcafee, Inc. Securing data using integrated host-based data loss agent with encryption detection
US8893285B2 (en) * 2008-03-14 2014-11-18 Mcafee, Inc. Securing data using integrated host-based data loss agent with encryption detection
US20090232300A1 (en) * 2008-03-14 2009-09-17 Mcafee, Inc. Securing data using integrated host-based data loss agent with encryption detection
US9077684B1 (en) 2008-08-06 2015-07-07 Mcafee, Inc. System, method, and computer program product for determining whether an electronic mail message is compliant with an etiquette policy
US8713468B2 (en) 2008-08-06 2014-04-29 Mcafee, Inc. System, method, and computer program product for determining whether an electronic mail message is compliant with an etiquette policy
US9531656B2 (en) 2008-08-06 2016-12-27 Mcafee, Inc. System, method, and computer program product for determining whether an electronic mail message is compliant with an etiquette policy
US20100229006A1 (en) * 2009-03-04 2010-09-09 Byeong Hoon Lee Memory for Protecting Data, Memory System Including the Memory, and Method of Driving the Memory
KR101565968B1 (en) 2009-03-04 2015-11-05 삼성전자주식회사 Memory for protecting data memory system including of the same and driving method for thereof
US8539251B2 (en) * 2009-03-04 2013-09-17 Samsung Electronics Co., Ltd. Memory for protecting data, memory system including the memory, and method of driving the memory
US20110010565A1 (en) * 2009-07-07 2011-01-13 Fujitsu Limited Apparatus and method for storing key data, library unit, and storage device
US8417970B2 (en) * 2009-07-07 2013-04-09 Fujitsu Limited Apparatus and method for storing key data, library unit, and storage device
US20110154052A1 (en) * 2009-12-23 2011-06-23 Quantum Corporation Media-following encryption policy control
US8850224B2 (en) * 2009-12-23 2014-09-30 Robert A. Yang Media-following encryption policy control
US20120079289A1 (en) * 2010-09-27 2012-03-29 Skymedi Corporation Secure erase system for a solid state non-volatile memory device
CN102930229A (en) * 2011-01-18 2013-02-13 苏州国芯科技有限公司 Office system for improving data security
US20170099274A1 (en) * 2015-06-09 2017-04-06 Verizon Patent And Licensing Inc. Call encryption systems and methods
US10038676B2 (en) * 2015-06-09 2018-07-31 Verizon Patent And Licensing Inc. Call encryption systems and methods

Also Published As

Publication number Publication date
GB0515734D0 (en) 2005-09-07
GB2429308A (en) 2007-02-21
GB2429308B (en) 2007-08-01

Similar Documents

Publication Publication Date Title
KR100713046B1 (en) License movement device and program
JP4198060B2 (en) System for controlling the use and copying of digital content that is distributed by removable recording medium
JP5006307B2 (en) Electronic device, content reproduction control method, program, storage medium, integrated circuit
US6851031B2 (en) Method of importing data from a physical data storage device into a virtual tape library
US5535188A (en) Data security protection for information recorded on a rewritable storage medium using a write-once read-many storage medium
CN1132373C (en) Method and appts. for dubbing control
EP0911738A2 (en) Disk drive with embedded data encryption
US5265230A (en) Method and apparatus for determining sector status in a data storage device by writing a status of read-only, writable, or obliterated in an error recovery area of each sector
US5233576A (en) Multi-function optical disk drive and media
EP1235380A1 (en) Data reproducing/recording apparatus / method and list updating method
US8918651B2 (en) Cryptographic erasure of selected encrypted data
US20090196417A1 (en) Secure disposal of storage data
CN1165905C (en) Copy-right protection method, recording method, recording, device reproducing method and device
US7925879B2 (en) Information processing unit with information division recording function
US20030074569A1 (en) Data backup method and storage medium for use with content reproduction apparatus
JP3454700B2 (en) Information storage device and a control method thereof
CN100514471C (en) Method and system of visiting encrypting content on mobile media by device
JP2011141883A (en) Method for encrypting/decrypting data in mass storage
US6947237B2 (en) WORM magnetic tape with cartridge memory system and method
JP4177514B2 (en) Computer systems and content protection method
US7124301B1 (en) Data protection method for a removable storage medium and a storage device using the same
CN101140778B (en) Method and system for recovering remnant encrypted data on a removable storage media
US5418852A (en) Unauthorized use prevention method for optical disks, optical disk having unauthorized use prevention function, and optical disk apparatus
WO2005079359A2 (en) System using radio frequency identification (rfid) for copy management of digital media
CA2324133A1 (en) Recording medium, recording apparatus and recording/reproducing system

Legal Events

Date Code Title Description
AS Assignment

Owner name: HEWLETT-PACKARD DEVELOPMENT COMPANY, L.P., TEXAS

Free format text: ASSIGNMENT BY OPERATION OF LAW;ASSIGNORS:MACKELDEN, JOHN MARK;EVANS, NIGEL RONALD;REEL/FRAME:018341/0696

Effective date: 20060814

STCB Information on status: application discontinuation

Free format text: ABANDONED -- AFTER EXAMINER'S ANSWER OR BOARD OF APPEALS DECISION